Blue Ghost

Linux Vendor Firmware Service (LVFS) is a portal that allows hardware vendors to upload firmware updates and users to update device firmware via the fwupd daemon.

Firmware/BIOS updates are automated.

DATA COLLECTION
IP address.
User-agent of client.
Machine ID.
Filename.
Distribution name and version.

Data is stored in the United States via a Amazon Web Services (AWS) data center.

Website: https://fwupd.org

#LVFS #LinuxVendorFirmwareService #Linux #CyberSecurity #InfoSec #Privacy

LVFS: Home

Apr 29, 2025 at 7:11amWeb
Show threadRichard HughesApr 29, 2025
@blueghost it's a little more nuanced, the client machine ID is only stored for report uploads. It's a delicate balance between privacy and being able to deal with ITAR/EAR legal issues and dealing with abuse. The full privacy policy is here if that helps: https://lvfs.readthedocs.io/en/latest/privacy.html#privacy-report
Privacy Report — LVFS documentation

Show threadBlue GhostApr 29, 2025

@hughsie
Thanks for the reply!

The post is intended to provide users a high level overview of what LVFS is along with what data is collected and where it is stored.

I provided the website address for anyone interested to visit for detailed information.